2026-08-02_535e8c0661e61e078aba79343dda3d27_bugat_coinminer_elex_wannacry

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-02_535e8c0661e61e078aba79343dda3d27_bugat_coinminer_elex_wannacry
Size 14.0MB
Sample260802-dnvd6assf1
SHA256 af4cc0c8ded52b8eee2d0ddcced88d7888924d8513601b150c8bce15e26cbbf8
MD5 535e8c0661e61e078aba79343dda3d27
SHA1 ee0b694c666117a53b954428c6c4d8954fb5bfaf
SHA512 4f3efb6df64f2a94f2c70150c0fce1333145c5d92e428369a93f9aba9d5d068ea76cb8c9ad80d79ba7db2979c617a993a8d8336a2c0afa17b02f3d8ed8e34b0a
SSDEEP 98304:YGCasyTy5soOlfFTY1XQIu0aYbe9ztudLQ/ndddN1nkE7U+t:YVazm5sxl9TO+YKNKLQ/ndd9n6
TLSH
T156E6E621E213821DFAE754F3D6FF4A6EA41C5619471960C371CC2A2B7BD95E2B93220F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-02_535e8c0661e61e078aba79343dda3d27_bugat_coinminer_elex_wannacry

File Explorer

2026-08-02_535e8c0661e61e078aba79343dda3d27_bugat_coinminer_elex_wannacry

.exe 14.0MB

2026-08-02_535e8c0661e61e078aba79343dda3d27_bugat_coinminer_elex_wannacry

IMPHASH 54ea17d2bffc09639bba10c94276bf15
SHA256 af4cc0c8ded52b8eee2d0ddcced88d7888924d8513601b150c8bce15e26cbbf8
MD5 535e8c0661e61e078aba79343dda3d27
SHA1 ee0b694c666117a53b954428c6c4d8954fb5bfaf
SHA512 4f3efb6df64f2a94f2c70150c0fce1333145c5d92e428369a93f9aba9d5d068ea76cb8c9ad80d79ba7db2979c617a993a8d8336a2c0afa17b02f3d8ed8e34b0a
SSDEEP 98304:YGCasyTy5soOlfFTY1XQIu0aYbe9ztudLQ/ndddN1nkE7U+t:YVazm5sxl9TO+YKNKLQ/ndd9n6
TLSH
T156E6E621E213821DFAE754F3D6FF4A6EA41C5619471960C371CC2A2B7BD95E2B93220F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4331222

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegSetValueExA CryptDeriveKey CryptDecrypt RegOpenKeyExA RegQueryValueExA RegSetValueExW RegQueryValueExW RegOpenKeyExW RegCreateKeyExW RegCloseKey RegOpenKeyA SetSecurityDescriptorDacl InitializeSecurityDescriptor RegDeleteValueA RegCreateKeyA CryptGetHashParam CryptReleaseContext CryptDestroyKey CryptEncrypt CryptImportKey CryptAcquireContextA GetUserNameA RegCreateKeyExA RegEnumValueA CryptDestroyHash CryptVerifySignatureA CryptHashData CryptCreateHash

atl71

AtlAxWinInit AtlAxGetControl

dinput8

DirectInput8Create

gdi32

CreateFontA DeleteObject CreateFontIndirectA GetObjectA DeleteDC SelectObject SetTextColor SetBkColor SetBkMode CreateDIBSection CreateCompatibleDC

imm32

ImmReleaseContext ImmGetOpenStatus ImmSetCompositionStringA ImmGetDescriptionA ImmGetContext ImmSetOpenStatus

kernel32

MultiByteToWideChar WideCharToMultiByte CreateEventA SetEvent QueryPerformanceCounter QueryPerformanceFrequency WritePrivateProfileStringA FindClose FindNextFileA FindFirstFileA GetTempFileNameA GetTempPathA lstrcmp GetModuleFileNameA lstrlenW UnmapViewOfFile MapViewOfFile CreateFileMappingA IsBadWritePtr lstrcmpi GlobalMemoryStatus GetComputerNameA IsBadReadPtr ResetEvent GetDiskFreeSpaceExA ReadFile GetFileSize SetCurrentDirectoryA FlushFileBuffers GetFileAttributesA WritePrivateProfileStringW GetPrivateProfileStringW GetPrivateProfileIntW GetVersion GetNumberFormatA OutputDebugStringW GetThreadContext GetCurrentThreadId IsDebuggerPresent GetModuleHandleA LoadLibraryA GetProcAddress InterlockedDecrement InterlockedIncrement RaiseException DeleteCriticalSection InitializeCriticalSection ReleaseMutex WaitForSingleObject Sleep CreateMutexA GetLastError GetCurrentDirectoryA GetPrivateProfileIntA GetPrivateProfileStringA CreateDirectoryA DeleteFileA GetLocalTime CreateFileA OpenProcess FreeLibrary CreateToolhelp32Snapshot Process32First Module32First Module32Next Process32Next EnterCriticalSection LocalFree GetSystemTimeAsFileTime GetStartupInfoA PeekNamedPipe GetStdHandle CreatePipe SetStdHandle DuplicateHandle GetFileInformationByHandle HeapAlloc LoadLibraryExA VirtualFree VirtualAlloc VirtualQuery OpenFileMappingA VirtualProtect GetModuleFileNameW GetSystemDirectoryA ExitProcess TerminateThread CreateThread OpenMutexA MoveFileExA CopyFileA GetTickCount OpenEventA LeaveCriticalSection SetUnhandledExceptionFilter lstrcat GetCurrentProcessId GetCurrentProcess lstrlen WriteFile GetCurrentThread CloseHandle OutputDebugStringA GetThreadLocale GetLocaleInfoA SetFilePointer CreateProcessA WaitForMultipleObjects GetExitCodeProcess SetThreadPriority ResumeThread SetEndOfFile TerminateProcess HeapValidate IsProcessorFeaturePresent FindResourceW FindResourceA SizeofResource LoadResource LockResource GetProcessHeap HeapFree CreateFileW GetACP InterlockedExchange lstrcpy GetVersionExA

msvcp71

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z ?_Myptr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEPADXZ ??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ ?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z ??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z ??_D?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXXZ ??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ ?str@?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@2@XZ ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@H@Z ??0?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@H@Z ?_Myptr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEPAGXZ ??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ID@Z ??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z ??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z ??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z ??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z ??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBG@Z ??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@IG@Z ??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z ??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@G@Z ?width@ios_base@std@@QAEHH@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z ?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z ?is@?$ctype@D@std@@QBE_NFD@Z ?to_char_type@?$char_traits@D@std@@SADABH@Z ?eq_int_type@?$char_traits@D@std@@SA_NABH0@Z ?_Getcat@facet@locale@std@@SAIPAPBV123@@Z ?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ ?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ ?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ ?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ ?capacity@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ ?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z ?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB ??1locale@std@@QAE@XZ ?getloc@ios_base@std@@QBE?AVlocale@2@XZ ?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ ??1_Lockit@std@@QAE@XZ ?_Register@facet@locale@std@@QAEXXZ ?_Incref@facet@locale@std@@QAEXXZ ?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@@Z ?_Getfacet@locale@std@@QBEPBVfacet@12@I@Z ??Bid@locale@std@@QAEIXZ ?id@?$ctype@D@std@@2V0locale@2@A ??0_Lockit@std@@QAE@H@Z ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ ?to_int_type@?$char_traits@D@std@@SAHABD@Z ??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z ?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ ?do_date_order@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AW4dateorder@time_base@2@XZ ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ ?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ ?good@ios_base@std@@QBE_NXZ ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ ?uncaught_exception@std@@YA_NXZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z ?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IG@Z ?is@?$ctype@G@std@@QBE_NFG@Z ?to_char_type@?$char_traits@G@std@@SAGABG@Z ?eq@?$char_traits@G@std@@SA_NABG0@Z ?eof@?$char_traits@G@std@@SAGXZ ?snextc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ ?sgetc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ ?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ ?max_size@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIXZ ?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@II@Z ?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB ?_Ipfx@?$basic_istream@GU?$char_traits@G@std@@@std@@QAE_N_N@Z ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ ?_Getcat@?$ctype@G@std@@SAIPAPBVfacet@locale@2@@Z ?id@?$ctype@G@std@@2V0locale@2@A ?widen@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEGD@Z ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ ?sbumpc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ ?to_char_type@?$char_traits@G@std@@SAGABG@Z ??A?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAGI@Z ?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGG@Z ?fill@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEGXZ ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ ?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ ??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ ?empty@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE_NXZ ?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z ??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z ??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ ?empty@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE_NXZ ??Bios_base@std@@QBEPAXXZ ?open@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXPBDHH@Z ??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@XZ ?clear@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXXZ ??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z ??A?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAGI@Z ?resize@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXI@Z ??$?6U?$char_traits@D@std@@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z ?end@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE?AViterator@12@XZ ?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AViterator@12@XZ ?replace@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@Viterator@12@0ABV12@@Z ?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@Viterator@12@0ABV12@@Z ?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@IAEX_NI@Z ??0?$_String_val@DV?$allocator@D@std@@@std@@IAE@V?$allocator@D@1@@Z ?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEX_NI@Z ??0?$_String_val@DV?$allocator@D@std@@@std@@IAE@V?$allocator@D@1@@Z ?reserve@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXI@Z ?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ ??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ ?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AViterator@12@XZ ??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z ??_D?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ ?str@?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z ?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z ??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z ??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z ??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z ?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXViterator@12@PBD1@Z ??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z ?push_back@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXD@Z ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z ??$?5DU?$char_traits@D@std@@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@PAD@Z ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z ?getline@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADH@Z ?putback@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z ?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@AAD@Z ?close@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAK@Z ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAM@Z ?eof@ios_base@std@@QBE_NXZ ??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ ??7ios_base@std@@QBE_NXZ ??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@PBDHH@Z ?close@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@M@Z ??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@PBDHH@Z ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAG@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z ?open@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXPBDHH@Z ??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@XZ ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAI@Z ?setiosflags@std@@YA?AU?$_Smanip@H@1@H@Z ?setprecision@std@@YA?AU?$_Smanip@H@1@H@Z ?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z ?find_last_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z ??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z ?_Nomemory@std@@YAXXZ ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ ?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z ?gcount@?$basic_istream@DU?$char_traits@D@std@@@std@@QBEHXZ ?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADH@Z ?ws@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@1@AAV21@@Z ??$?6U?$char_traits@D@std@@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@D@Z ?_Myptr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEPADXZ ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z ??0_Lockit@std@@QAE@XZ ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z

msvcr71

_setjmp3 _unlink __security_error_handler __set_app_type __p__fmode __p__commode _adjust_fdiv __setusermatherr _initterm __getmainargs _amsg_exit _acmdln _cexit _ismbblead _XcptFilter _exit _c_exit _onexit __dllonexit ??1type_info@@UAE@XZ ?terminate@@YAXXZ _mbsnbcat _mbsnbicmp _wcsdup _wcslwr _strlwr _strnicmp _mbsnbcpy _access _mbsrchr clock _lrotr _lrotl calloc _controlfp qsort _CIpow _ftol setlocale _mbsdup sscanf isalnum isalpha isdigit _CIacos realloc _callnewh clearerr ??3@YAXPAX@Z ??_V@YAXPAX@Z strncpy memset _mkdir sprintf fclose fread ftell fseek fopen _mbscat _mbscpy __CxxFrameHandler atoi strlen strtok memcpy strncmp rename fprintf srand time _chdir _snprintf _purecall _CxxThrowException ??0exception@@QAE@ABV0@@Z ??1exception@@UAE@XZ ??0exception@@QAE@XZ memmove _except_handler3 free ??0bad_cast@@QAE@ABV0@@Z ??1bad_cast@@UAE@XZ ??0bad_cast@@QAE@PBD@Z atof strcmp sin atan2 rand _mbschr fscanf strrchr tolower toupper fabs _mbsstr _mbsicmp wcsncpy wcscpy wcsrchr wcslen swprintf _getcwd strchr fwrite memcmp abs wcsstr sqrt ceil abs strpbrk _mbscspn strcspn _itoa strncat _mbstok localtime _atoi64 _mbsupr _resetstkoflw malloc printf log vsprintf atan cos acos asin tan isspace _finite bsearch floor _strupr strstr log10 _beginthreadex _endthreadex pow _errno system _strcmpi __RTDynamicCast _mbsinc _ismbcspace fgets longjmp _iob abort _fileno strtod exit fflush gmtime _fdopen _vsnprintf fputc strerror

oleaut32

CreateErrorInfo GetErrorInfo SysStringLen SysFreeString LoadTypeLib LoadRegTypeLib SysAllocString VariantCopy VariantInit SysAllocStringByteLen SysStringByteLen VariantClear VariantChangeType SetErrorInfo

rpcrt4

UuidToStringA UuidCreate RpcStringFreeA

shell32

SHBrowseForFolderW SHGetPathFromIDListW ShellExecuteA

user32

DispatchMessageA TranslateMessage GetMessageA PeekMessageA SetCursorPos GetClientRect UpdateWindow ShowWindow UnregisterClassA CreateWindowExA AdjustWindowRect ChangeDisplaySettingsA LoadCursorA LoadIconA EnumDisplaySettingsA MessageBoxA ReleaseCapture SetCapture GetWindowRect PtInRect ClientToScreen GetCursorPos PostMessageA IsWindow DefWindowProcA GetWindowLongA KillTimer SetTimer GetAsyncKeyState UnhookWindowsHookEx SetWindowsHookExA CallNextHookEx CharUpperA SetFocus SendMessageA wsprintfA BeginPaint IsIconic GetActiveWindow SetWindowTextA PostQuitMessage DrawTextA MessageBoxW DrawTextW RegisterClassExA CharNextA CharLowerA SystemParametersInfoA CallWindowProcA DestroyWindow EnableWindow SetWindowLongA MoveWindow GetWindowTextA SetRect ScreenToClient GetSystemMetrics GetKeyState ShowCursor GetKeyboardLayout SendMessageW GetClipboardFormatNameA CharUpperW EndPaint

version

GetFileVersionInfoA GetFileVersionInfoSizeA VerQueryValueA

wininet

InternetCloseHandle FtpPutFileA InternetConnectA InternetOpenA

winmm

timeKillEvent timeGetTime timeSetEvent

ws2_32

sendto socket send recv WSACloseEvent WSAGetLastError WSAConnect WSASend WSACreateEvent WSASocketA setsockopt WSAEnumNetworkEvents WSAWaitForMultipleEvents inet_ntoa gethostbyname gethostname inet_addr WSAEventSelect WSAStartup WSACleanup closesocket connect htons

d3d8

Direct3DCreate8

dbghelp

SymGetLineFromAddr SymGetModuleBase SymGetOptions StackWalk SymGetSymFromAddr SymGetModuleInfo SymCleanup SymSetOptions SymFunctionTableAccess SymInitialize

ole32

CoCreateInstance CoUninitialize CoInitialize

Name

.text

Size

13.9MB

Virtual Size

13.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

20KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

zaas

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

plhc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

24KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.zeji

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

tB^c�u�

Size

20KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

generic

count=2, id=93, productName=VS2003 (.NET) SP1 build 6030, version=6030,

count=5, id=105, version=2067,

count=11, id=15, productName=VS2003 (.NET) build 3077, version=3077,

count=9, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,

count=1, id=18, version=8444,

count=8, productName=Unmarked objects (old),

count=83, id=29, version=9178,

count=3, id=28, version=9178,

count=3, id=11, version=8966,

count=1, id=96, productName=VS2003 (.NET) SP1 build 6030, version=6030,

count=4, id=93, productName=VS2003 (.NET) build 3077, version=3077,

count=3, id=95, version=2179,

count=6, id=25, version=9210,

count=2, id=93, version=2067,

count=25, id=93, version=2179,

count=636, id=1, productName=Unmarked objects,

count=369, id=96, productName=VS2003 (.NET) build 3077, version=3077,

count=45, id=95, productName=VS2003 (.NET) build 3077, version=3077,

count=1, id=94, productName=VS2003 (.NET) build 3052, version=3052,

count=1, id=90, productName=VS2003 (.NET) SP1 build 6030, version=6030,